Search CSRC

NIST will be hosting the third in a series of public workshops on the development of the Privacy Framework: An Enterprise Risk Management Tool on July 8th-July 9th in Boise, Idaho. We thank Boise State University for hosting this two-day event, where attendees will have an opportunity to actively engage in facilitated discussions to advance the development of the framework. Additional details about pre-read materials will be available closer to the event. This workshop will be open to the public.

The Information Security and Privacy Advisory Board (ISPAB) is authorized by 15 U.S.C. 278g-4, as amended, and advises the National Institute of Standards and Technology (NIST), the Secretary of Homeland Security (DHS), and the Director of the Office of Management and Budget (OMB) on information security and privacy issues pertaining to Federal government information systems, including thorough review of proposed standards and guidelines developed by NIST. Follow this link to view the current ISPAB CHARTER. Follow this link to view the Federal Register Notice (FRN). For Directions, click...

→ June 22, 2020 Meeting the Need: Training that Rocks The world is changing before our eyes – no doubt about it. If we, as learning and development leaders, are to keep up with the required changes, trends, and learner needs, we’ve also got to make some big changes. We’ve invited four incredibly high-impact learning and development leaders to talk with us about how we can take our training development and delivery to the next level. In this session, experts from both cybersecurity and training development are going to discuss how you can change your cybersecurity awareness program to be...

NIST hosted a virtual workshop on Random Bit Generation (RBG) as specified in the SP 800-90 series of publications: SP 800-90A (Deterministic Random Bit Generator Mechanisms), SP 800-90B (Entropy Sources), and SP 800-90C (RBG Constructions). The workshop was held May 31- June 1 (10am-3pm EDT each day) and consisted of presentations and discussions about each of the documents, future plans for each document, and testing and validation issues. Agenda On-Demand Videos May 31 - Morning Session May 31 - Afternoon Session June 1 - Morning Session June 1 - Afternoon Session Inquiries:...

The Information Security and Privacy Advisory Board (ISPAB) is authorized by 15 U.S.C. 278g-4, as amended, and advises the National Institute of Standards and Technology (NIST), the Secretary of Homeland Security (DHS), and the Director of the Office of Management and Budget (OMB) on information security and privacy issues pertaining to Federal government information systems, including through review of proposed standards and guidelines developed by NIST. The Federal Register Notice for this meeting is available here. Meeting Minutes are available here. Contact Jeff Brewer at...

The Information Security and Privacy Advisory Board (ISPAB) is authorized by 15 U.S.C. 278g-4, as amended, and advises the National Institute of Standards and Technology (NIST), the Secretary of Homeland Security (DHS), and the Director of the Office of Management and Budget (OMB) on information security and privacy issues pertaining to Federal government information systems, including through review of proposed standards and guidelines developed by NIST. View the Federal Register Notice for this meeting. View or download the Meeting Minutes from this meeting. Contact Jeff Brewer at...

The Information Security and Privacy Advisory Board (ISPAB) is authorized by 15 U.S.C. 278g-4, as amended, and advises the National Institute of Standards and Technology (NIST), the Secretary of Homeland Security (DHS), and the Director of the Office of Management and Budget (OMB) on information security and privacy issues pertaining to Federal government information systems, including through review of proposed standards and guidelines developed by NIST. View and download the Federal Register Notice (FRN) for this event. Meeting Minutes will be posted approximately 30 days after the...

(All presentations in .pdf format.) Federal Regsiter Notice Announcing Meeting Minutes Computer Security: Standards? Recommendations? Guidelines? Edward Roback, NIST Computer Security Division DMCA and the Effects of Regulating Computer Security Research and Discussion Professor Edward Felton, Department of Computer Science, Princeton University National Information Assurance Education and Training Program Ms. Sherry Borror, National Infosec Education and Training Program, NSA Baseline Information Security Standards: An Audit Perspective Mr. Russell A. Rau, Assistant Inspector General...

The Governor of Maryland, Martin O’Malley, hosted a Cyber Maryland Summit at NIST on January 11, 2010. The purpose of the CyberMaryland Summit was to: Release an inaugural Cyber Security Report and unveil the Maryland State’s action plan to increase Maryland jobs; Acknowledge partners and industry leaders; Communicate State assets and economic impact; Recognize Congressional delegation; and Connect with NIST Director and employees. Summit Content Welcome / Opening Statement Webcast recording Presentations Scroll to bottom of this page for links to Selected Presentations...

During this two-day workshop, NIST introduced Draft FIPS 201-2 and elicited questions, comments and feedback. Presentations Overview (Goals of the workshop, purpose of the revision, overall revision process, summary of proposed changes) Hildegard Ferraiolo, NIST Identity Proofing and Registration (OPM Springer memo, source documents, chain-of-trust, Central Verification System) William MacGregor, NIST Issuance and Maintenance (Special rule for pseudonyms, grace period, name change by card-holder, re-key, post-issuance updates, verification data reset) Ketan Mehta, Booz Allen Hamilton PIV...

(All presentations in .pdf format.) Federal Register Notice Announcing Meeting Minutes OMB's 2010 FISMA Report - Final Cyber Security Workforce Structure Maureen B. Higgins, Assistant Director, Agency Support & Technical Assistance, OPM Cyber Security and Science Peter Weinberger, Computer Scientist, Google VA Medical Device Protection Program (3 separate presentations) Randy Ledsome, Director of Field Security Services, VA Lynette Sherrill, Deputy Director Health Information Security Division, VA Dr. Dale Nordenberg, Medical Device and EHR Innovation, Safety, and Security Consortium...

Presentations & Speakers at a Glance: Preparing for and Responding to Certification Authority Compromise and Fraudulent Certificate Issuance, Paul Turner & Joe Jarzombek, DHS; and Software Assurance: Enabling Security and Resilience throughout the Software Lifecycle, Joe Jarzombek, DHS. NOTE: FORUM MEETINGS ARE OPEN TO ONLY FEDERAL/STATE EMPLOYEES, HIGHER EDUCATION EMPLOYEES, AND THEIR DESIGNATED SUPPORT CONTRACTORS. REGISTRANTS MUST USE A .GOV, .EDU, OR .MIL ADDRESS FOR SIGN-UP. SUPPORT CONTRACTORS MUST INDICATE THE AGENCY OR ORGANIZATION THEY SUPPORT. The Federal Computer...

(All presentations in .pdf format.) Federal Register Notice Announcing Meeting Minutes FISMA - Perspectives from OMB and DHS Dave Otto, Branch Chief for Cybersecurity Performance Management in Federal Network Resilience, DHS Continuous Monitoring and its Ability to Create Efficiences - Information Sharing Protocols / Autmoated Indicators Danny Toler, Deputy Director, Federal Network Resilience, DHS Executive Order (EO) and Legislative Actions - DHS Information Sharing Update Jenny Menna, Director, Stakeholder Engagement and Cyber Infrastructure Resilience Division, U.S. Department of...

(All presentations in .pdf format.) Federal Register Notice Announcing Meeting Minutes Personal Identity Verification (PIV) Credentials for Mobile Devices Hildegard, Ferraiolo, NIST The Next Generation (SP 800-73-4) PIV Card and the Purpose of the Pairing Code in the Wireless Environment David Cooper, NIST Big Data and Privacy Marjory S. Blumenthal, Executive Director, President’s Council of Advisors on Science and Technology, Office of Science and Technology Policy FISMA FY13 Report Trevor Rudolph, OMB US CERT Ann Barron-DiCamillo, Director, United States Computer Emergency...

NIST and the Department of Health and Human Services (HHS), Office for Civil Rights (OCR) are pleased to co-host the 8th annual conference, Safeguarding Health Information: Building Assurance through HIPAA Security, on September 2-3, 2015 at the Grand Hyatt, Washington, D.C. The conference will explore the current health information technology security landscape and the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. This event will highlight the present state of health information security, and practical strategies, tips and techniques for implementing the HIPAA...

(All presentations in .pdf format.) Federal Register Notice Announcing Meeting Minutes Wednesday, June 10 Information Technology Laboratory (ITL) Realignment and Proposed Applied Cybersecurity Division Donna Dodson, NIST National Initiative for Cybersecurity Education (NICE) Updates Rodney Petersen, Lead NICE, NIST IG Reporting on FISMA Gale Stone, (Moderator), SSA Dr. Brett M. Baker, National Science Foundation Peter J. Sheridan, Federal Reserve Board Vehicle Infrastructure (Auto-manufacturer Communication and Usability): Discussion on Data Security and Privacy Andrew...

Presentations & Speakers at a Glance: Updates from the Office of Management and Budget on Executive Order (EO) 14028, Steven McAndrews; EO 14028, Updates from CISA on Coordination Activities, Harry Mourtos, CISA; and EO 14028, Updates from NIST on Supply Chain Risk Management and Critical Software, Jon Boyens, Barbara Guttman, and Karen Scarfone. NOTE: FORUM MEETINGS ARE OPEN TO ONLY FEDERAL/STATE EMPLOYEES, HIGHER EDUCATION EMPLOYEES, AND THEIR DESIGNATED SUPPORT CONTRACTORS. REGISTRANTS MUST USE A .GOV, .EDU, OR .MIL ADDRESS FOR SIGN-UP. SUPPORT CONTRACTORS MUST INDICATE THE...

30th Annual FISSEA Conference June 19, 2017 @ NIST - Gaithersburg, MD USA “Securing the Future to Infinity and Beyond: 30 years of Improving Cybersecurity through Awareness, Training, and Education” June 19, 2017 Agenda FISSEA Chairperson (right), and Coordinator (left) 2016 FISSEA Educator of the Year Presented to Prof. Sushil Jajodia Gretchen Morris, 2015 FISSEA Educator of the Year, presented the 2016 FISSEA Educator of the Year award to Prof. Sushil Jajodia, George Mason University on June 19, 2017. The FISSEA Educator of the Year award recognizes an individual who...

(All presentations are in .pdf format.) Federal Register Notice Announcing Meeting Minutes NIST Computer Security Division Update Mr. Edward Roback, Chief, Computer Security Division, NIST NIST Security Testing & Metrics Group Program Mr. Ray Snouffer, Group Leader, Computer Security Division, NIST NIST Security Technology Group Program Mr. William Burr, Group Leader, Computer Security Division, NIST Briefing on the General Accounting Office's (GAO's) Report on the Privacy Act Ms. Linda Koontz, Director of Information Management, GAO Department of Veterans Affairs Cyber Security Program...

A meeting of the Information Security and Privacy Advisory Board (ISPAB) was held in Rockville, Maryland, on June 10-12, 2003. Federal Register Notice Announcing Meeting Minutes Selected Presentations Large Scale Consumer eAuthentication Khaja Ahmed, Software Architect, Microsoft Corporation An Overview of the National Criminal Justice Index Tim Bouma, Senior Consultant, CGI Managing Consultant Group Security Checklists for Commercial IT Products Tim Grance, Manager, National Institute of Standards and Technology Professional Certification Briefing Hun Kim, U.S. Navy National...

(All presentations in .pdf format.) Federal Register Notice Announcing Meeting Minutes Background and Current Status: Use of Hashing Algorithms in the U.S. Federal Personal Identity Verification Program Biometrics Storage Format Selection for the U.S. Federal Personal Identity Verification Program Curt Barker, Computer Security Division, NIST NIST Hash Function Standards Status and Plans Bill Burr, Computer Security Division, NIST Updates on the Federal Enterprise Architecture Program Dick Burk, Chief Architect and Director of the Federal Enterprise Architecture (FEA) Program at...

(All presentations in .pdf format.) Federal Register Notice Announcing Meeting Minutes The National Finance Center and Hurricane Katrina Gilbert Hawk, USDA SSA OIG's Use of Contractors to Comply with FISMA Gale Stone, Social Security Administration IG PCIE Panel on FISMA Judy Gordon, U.S. Department of Commerce, AIG HSPD-12 Update Carol Bales, OMB Security Metrics Panel On the Brittleness of Software and the Infeasibility of Security Metrics Steven M. Bellovin, Columbia University Secure One: HHS Measuring Information Security and FISMA Compliance Jaren Doherty, HHS Information...

(All presentations in .pdf and/or Powerpoint format.) Federal Register Notice Announcing Meeting Minutes Suite B Cryptography Elaine Barker, Computer Security Division, NIST IA Personnel Readiness: Training, Certification and Workforce Management George Bieber, Defense-wide IA Program (DIAP), DoD Update on NIAP Program Activities Audrey M. Dale, Director, NIAP / CCEVS, NSA FIPS 201 Evaluation Program April Giles, General Services Administration InfoSec/Privacy Considerations for Software in Advancing National Strategy to Secure Cyberspace (Panel Session) Steve Lipner, Moderator...

(All presentations in .pdf format.) Federal Register Notice Announcing Meeting Minutes NIST Computer Security Division Update Curt Barker, Division Chief, Computer Security Division, NIST The Implementation of Homeland Security Presidential Directive 12 David Temoshok, General Services Administration Law, Regulation and National Cyber Security: An Overview Greg Garcia, Vice President, Information Security Information Technology Association of America Privacy and Technology Project: Project Overview, Update And Next Steps Leslie Reis, Professor, The John Marshall Law School, Facilitator...

(All presentations in .pdf format.) Federal Register Notice Announcing Meeting Minutes NIST Briefing: NIST Overview Briefing Dr. James M. Turner, NIST Deputy Director Computer Security Activities William Curt Barker, Computer Security Division Chief, NIST Distributed Identification and Protection of Citizen Data Panel Distributed Identification and Consumer Data Protection Khaja Ahmed, Microsoft Privacy Summit -- hosted by the Public Policy Expert Group of the Liberty Alliance in conjunction with the Net-ID 2007 Conference NRC Privacy Study Engaging Privacy and Information...